August 2002 - openSUSE Security - openSUSE Mailing Lists

RE: [suse-security] harden-suse
by Heupink, Mourik Jan C. 31 Aug '02

31 Aug '02

thanks very much for your replies! mourik jan -----Original Message----- From: Heupink, Mourik Jan C. [mailto:Heupink@INTECH.UNU.EDU] Sent: zaterdag 31 augustus 2002 14:46 To: suse-security(a)suse.com Subject: [suse-security] harden-suse Hi all. When running the harden script on suse 8, it complains that the suse version is too new, and that hardening this version is not supported. Should I worry, or just go ahead? Thanks in advance, Mourik Jan -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

1 0

harden-suse
by Heupink, Mourik Jan C. 31 Aug '02

31 Aug '02

Hi all. When running the harden script on suse 8, it complains that the suse version is too new, and that hardening this version is not supported. Should I worry, or just go ahead? Thanks in advance, Mourik Jan

1 0

How to enable telnet and ftp in suse 8.0
by Dilip M 31 Aug '02

31 Aug '02

Hello All, I recently insalled Suse 8.0 and was using Red_hat before.I do like Suse for its very good GUI. But the problem is i could telnet ot other systems and no one can telnet to mine.Sice i'm desktop is within intranet there will be no security issue if i enable this option.I tried from past 2 days but was unsuccessful in enabling this option.How to enable this option. Kindly help Thanks Dilip =====================

3 2

Problems with SuSEfirewall2 on SuSE 7.2
by Thomas Gaertner 31 Aug '02

31 Aug '02

-----BEGIN PGP SIGNED MESSAGE----- Hello, I 've some problems with the SuSEfirewall2. In my setup it allows access to ports ( like telnet mysql... ) which I have NOT opened to the outside. I use also autoprotection but it does not help. Does anyone have an idea how i get my firewall working? ( configurations below ) bye... - -- Thomas Gaertner ( host leela ) Brandenburg Technical University at Cottbus Student Assistent at the Software and Systems Engineering Group - --------------------------------------------------------------- Please send only plain ASCII-Mail. In case your Mail will be turned down, use <Dr.Zoidberg-Earth(a)gmx.net>. But beware - I check this mailbox only once a day. - -- Save Futurama! For more, see http://www.gotfuturama.com/cancelled - --- PGP-Public-Key http://www-stud.informatik.tu-cottbus.de/~tgaertne/public-pgp-2048.04232001… -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.8 iQEVAwUBPW8fSlRxDogMOg+VAQGrSwf/ddBOAYZgEW9DFYTShtFcnq8bo7kJJ34g 6Ueq4bZm6vB5z4r6kHNSJn8r9xsOzjGx+EjNq78Np4oYTSG4HVDXYLEGAXchSkga i6lG+F2xoEY92pYd9HwAdTTlQfS0ZxEYe1gIqIc5eUZKP3sIrChSk1/FXYC5r8W2 GHJfKHk4lDi4l0ly2PXiMAsOzCfvkM2Fc7r21JGYx8ztqyPkTGzGZUvJT9/qNHbU t20fV/uUGWab8erItp4eicEpNkhfJryXIU/O52ckdnE++5dvKOlQRd9rWPpz/ako ao//gfT6i1HTgvd8WsBTiZQalw606bxtFTUYn8TTaXUuLSeyWxEcxw== =enOv -----END PGP SIGNATURE-----

3 2

Fwd: Re: [suse-security] Problem with SuSEfirewall2 and IPv6
by Tarin＠gmx.net 31 Aug '02

31 Aug '02

--- Weitergeleitete Nachricht / Forwarded Message --- Date: Sat, 31 Aug 2002 01:15:54 +0200 (MEST) From: Tarin(a)gmx.net To: Richard <ratcheson(a)earthlink.net> Subject: Re: [suse-security] Problem with SuSEfirewall2 and IPv6 > > On Friday 30 August 2002 3:05 pm, Tarin(a)gmx.net wrote: > > > Hi! > > > > > > (I hope this is the correct list, it's the only one my problem seems > re > > lated > > > to :/ ) > > > > > > To start with, I'm pretty new to Linux. I'm using SuSE 8.0 as a > Webserv > > er > > > and Router for my > > > LAN. > > > I've got a problem with SuSEfirewall2 and IPv6: I set up everything so > > > I > > > could use > > > IPv6 through a tunnel, and it works fine (connecting to IPv6 IRC > server > > s, > > > ping6...), > > > as long as I don't have the firewall enabled. When the firewall is up > > > running doing > > > any IPv6 operation to computers on the internet (like ping6-ing them) > d > > oes > > > not work. But > > > having the firewall switched off is obviously not an option to > discuss. > > > I configured the firewall using Yast2 and I'm also using it to route > th > > e > > > traffic, so the > > > clients in the network can access the internet. I did not change > anythi > > ng on > > > the config > > > files (not that I'd know how/what to change ;). > > > My question: what exactly do I have to do to get IPv6 working through > t > > he > > > firewall? I > > > searched several forums and google, to no avail. > > > > > > Thanks in advance for your help! > > > > > > -- > > > GMX - Die Kommunikationsplattform im Internet. > > > http://www.gmx.net > > > > > > > > > Hi, > > Unless you are really committed to using SuseFirewall2, I have a better > > solutiion, I think. I went to Shorewall for my firewalling. It is a > lot > > > > easier to understand and the author gives outstanding support. You can > f > > ind > > it at www.shorewall.net. > > > > Be sure to read the Quickstart Guide and the other documentation. It's > v > > ery > > complete and easier to understand than suse firewalling. > > Richard > > > > Thanks for your reply! I installed Shorewall, and I think it's a lot more > secure now than my SuSEfirewall2 configuration ;) But it did not help to > solve > my problem :( I still can't use IPv6 to connect to any server on the > internet, not even ping6 them. Any other ideas? > > -- > GMX - Die Kommunikationsplattform im Internet. > http://www.gmx.net > > -- GMX - Die Kommunikationsplattform im Internet. http://www.gmx.net

2 2

Problem with SuSEfirewall2 and IPv6
by Tarin＠gmx.net 30 Aug '02

30 Aug '02

Hi! (I hope this is the correct list, it's the only one my problem seems related to :/ ) To start with, I'm pretty new to Linux. I'm using SuSE 8.0 as a Webserver and Router for my LAN. I've got a problem with SuSEfirewall2 and IPv6: I set up everything so I could use IPv6 through a tunnel, and it works fine (connecting to IPv6 IRC servers, ping6...), as long as I don't have the firewall enabled. When the firewall is up running doing any IPv6 operation to computers on the internet (like ping6-ing them) does not work. But having the firewall switched off is obviously not an option to discuss. I configured the firewall using Yast2 and I'm also using it to route the traffic, so the clients in the network can access the internet. I did not change anything on the config files (not that I'd know how/what to change ;). My question: what exactly do I have to do to get IPv6 working through the firewall? I searched several forums and google, to no avail. Thanks in advance for your help! -- GMX - Die Kommunikationsplattform im Internet. http://www.gmx.net

1 0

Re: [suse-security] still problems to use SSH Authentication
by Andreas Baetz 30 Aug '02

30 Aug '02

On Aug 30, Dominik Metzler <doeme(a)dplanet.ch> wrote: > > tying still to conf. my remot to log in without any passwd > > using the SSH > > Key Authentication. I generate a key via ssh-keygen. copied the > > "identity.pub" file into the "remote:/$HOME/.ssh" --> > > appended the file > > to the "authorized_keys" file. than I restart the sshd on > > both machines You could try the following: 1) ssh-keygen -t rsa, don't give a password this generates a rsa key for protocol version 2 2) take $HOME/.ssh/id_rsa.pub and put it in the remote user's $HOME/.ssh/authorized_keys2 or $HOME/.ssh/authorized_keys, depending on the version you're running on the remote host. 3) on the remote host, set "Protocol 2" or "Protocol 2,1", (the latter I would recommend only if there have to be proto 1 clients). and restart remote sshd. Andreas Baetz ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been scanned for the presence of computer viruses. **********************************************************************

2 1

bind8 or 9?
by Volker Kuhlmann 30 Aug '02

30 Aug '02

Is anyone able/willing to give a brief opinion about the level of security of bind 8 and 9? There must be a reason why SuSE ships both. If they're equally secure it would seem to be more sensible to go with the new version for new servers? Thanks in advance, Volker -- Volker Kuhlmann is possibly list0570 with the domain in header http://volker.orcon.net.nz/ Please do not CC list postings to me.

4 3

mgetty
by Thomas Wheeler 30 Aug '02

30 Aug '02

Hi all How do I get mgetty to answer data calls. I want to create a small dial in server for my staff but some reason I can get the modem to dial out but not receive calls. Regards, Thomas Wheeler -=No Trees Were Harmed By Sending This Email, Only A Few Electrons Were Seriously Discomforted =-

2 1

SuSE8.0 and Freeswan-1.95_0.9.8-69
by Glenn Remstedt 30 Aug '02

30 Aug '02

list, I'm trying to sign the certificate-request in the following way; # mount /floppy # cd ~/certs linux:~/certs # openssl ca -policy policy_anything -in /floppy/request.rec \ -out /floppy/request.cer Using configuration from /usr/share/ssl/openssl.cnf Enter PEM pass phrase: /floppy/request.rec: No such file or directory 1639:error:02001002:system library:fopen:No such file or directory:bss_file.c:245:fopen('/floppy/request.rec','r') 1639:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:247: linux:~/certs # What's wrong here? // glenn

4 4